Ground Labs Enterprise Recon vs IRI DarkShield

Ground Labs Enterprise Recon discovers and manages sensitive data across structured and unstructured environments to support compliance and data security. It scans on-premises platforms, databases, email, archive storage, cloud services, endpoints, and file servers. Ground Labs says the product includes more than 300 preconfigured personal data types and allows custom patterns. Remediation options include redaction, secure erasure, quarantine, and encryption. Enterprise Recon integrates with Microsoft Purview for persistent classification metadata and provides ODBC integration with compatible applications and business intelligence platforms for analytics. Its PII and PRO editions include a RESTful API for reports, match-location data, remediation actions, and workflow automation. Documented security controls include two-factor authentication, password policies, user roles and permissions, and IP address access controls. Local agent operating systems include Windows, Linux, macOS, FreeBSD, AIX, and Solaris. The product lists requirements including PCI DSS, GDPR, HIPAA, CCPA/CPRA, Singapore PDPA, and others. Licensing limits depend on the model and may use data-volume allowances or target-count and scanned-volume limits. Pricing is on request.

IRI DarkShield finds, classifies, extracts, reports on, and masks sensitive information in structured, semi-structured, and unstructured data. Searches can use regular expressions, lookup values, path filters, or named-entity recognition with NLP and machine learning. Masking options include deletion, encryption, hashing, pseudonymization, and randomization. Sources range from local or SMB files and cloud object storage to JDBC databases and NoSQL collections. Jobs can run through IRI Workbench, command-line tools, batch scripts, or API-calling programs; Version 6 added REST API support. An exportable HTML5 dashboard shows what sensitive data was found and whether it was masked, while logs can go to SIEM tools such as Splunk Enterprise Security and Datadog. DarkShield runs within customer-controlled infrastructure, on premises or in a customer-controlled cloud. It supports Windows, Linux, and macOS, with at least 4 GB RAM and two cores recommended. Pricing starts at $5,490, and a 30-day trial is listed. Standalone licenses are perpetual and charged per hostname; first-year support is included, with later support available at 20% of the license-fee basis per year.